This legal text gives details of how we collect and process your personal data through your use of our website www.hotelmarismasanctipetri.es, including any information you may provide to us through the site when you sign up for a service, register for our newsletter or provide your contact details through the form provided for this purpose. When you provide us with your data, we inform you that our services are not possible for those persons who are not able to give consent, so when you send us the forms, you guarantee that you have sufficient capacity to give consent.
Contact details of the data controller:
Mercantile registration details:
ALTEA HOUSE, is responsible for your data. (Hereinafter we, us or our).
What data do we collect?
The General Data Protection Regulation tells us that personal data is any information about an identified or identifiable natural person, i.e. any information capable of identifying a person. This would not include anonymous data, or percentage data.
We may process certain types of personal data on our site, which may include:
Identity data: first and last name.
Contact details: email address.
Financial data: credit card details.
Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication.
We do not collect any data relating to special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and information about your health, genetic or biometric data).
In the event that you are required to collect personal data by law or under the terms of a contract between us and you refuse to provide it to us, we may not be able to perform the contract or provide the service and you must let us know in advance.
How do we collect your personal data?
The means we use to collect personal data are:
Through the form on our website, through our contact emails, by telephone or post, when:
You request information about our services
You contract the provision of our services.
You request a quote
To ensure the quality of our website, we reserve the right to refuse any application for registration or to suspend or cancel a previously accepted registration if we believe that it does not meet these requirements or any other law or regulation. If this happens, we will try to give reasons for our decision, but we cannot undertake to do so in all cases.
Through third parties:
Google: analytical data or search data. Outside the European Union.
Purpose and legitimacy for the use of your data.
The most common uses of your personal data are:
For the formalisation of a contract between ALTEA HOUSE and you.
When you give your consent to the processing of your data.
When we need it to comply with a legal or regulatory obligation.
When it is necessary for our legitimate interest or that of a third party.
The User may revoke the consent given at any time by sending an email to firstname.lastname@example.org or by consulting the exercise of rights section below.
Below is a table showing the ways in which we will use your personal data and the legitimacy for its use, as well as the type of personal data we will process. We may process some personal data for additional legal reasons, so if you need details please send an email to email@example.com Purpose Type of data Legitimacy for its treatment
Booking form – First name
– Email address
– Credit card details
Consent of the data subject
Fulfilment of a contractual obligation
Newsletter – Email Consent of the data subject
Contact – First name
– Your email address
– Your phone number
Consent of the interested party
Work with us – First name
– Your email address
– Your phone number
Consent of the interested party
Fulfilment of pre-contractual obligation
Commercial communications: you will only receive communications if:
You have requested information from us or you have contracted a product or service from us.
If you provided us with your details, accepting the box provided for this purpose on our form.
Provided that you have not expressed your wish to stop receiving such communications.
We obtain your express consent before sending you any communication, and you may request at any time that we stop sending you communications by email to firstname.lastname@example.org.
Where you opt out of receiving communications from us, your personal data will continue to be stored as a result of your contracting with us in order to comply with legal requirements.
Purpose: We will only use your data for the purposes for which we collect it, unless we reasonably consider that we should use it for another purpose, notifying you in advance so that you are informed of the lawful reason for processing and provided that the purpose is compatible with the original purpose.
Retention period: They will be kept for the time necessary to fulfil the purpose for which they were collected and to determine any liabilities that may arise from that purpose and from the processing of the data. The provisions of the different regulations regarding the retention period shall apply, insofar as they are applicable to the present processing.
Data of subscribers by e-mail or form: From the time the user subscribes until he/she unsubscribes.
Your Data Protection Rights
How to exercise these rights? Users can send a communication to the registered address of ALTEA HOUSE or e-mail address email@example.com, including in both cases a photocopy of their ID card or other similar identification document, to request the exercise of the following rights:
Access to your personal data: you may ask ALTEA HOUSE if it is using your personal data.
To request their rectification, if they are not correct, or to exercise the right to be forgotten with respect to them.
To request the limitation of the treatment, in this case, they will only be kept by ALTEA HOUSE for the exercise or defence of claims.
To oppose their processing: ALTEA HOUSE will stop processing the data in the way you indicate, unless for legitimate reasons or for the exercise or defence of possible claims, they should continue to be processed.
Data portability: if you want your data to be processed by another company, ALTEA HOUSE will facilitate the portability of your data to the new data controller.
You can use the forms made available to you by the Spanish Data Protection Agency to exercise your previous rights: Here
Claim before the AEPD: if you consider that there is a problem with the way in which ALTEA HOUSE is treating your data, you can address your claims to the corresponding control authority, being in Spain, the competent one for this: Spanish Data Protection Agency.
We may need to ask you for specific information to help us confirm your identity and guarantee your right to access your personal data (or exercise any other of the aforementioned rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it.
All requests are dealt with by us within the legal deadline of 1 month. However, it may take longer than one month if your request is particularly complex, or if you have already taken a number of actions previously. In this case, we will notify you and keep you updated.
Transfer of personal data
In the course of our work, we may need the assistance of third parties, who will only process the data for the purpose of providing the contracted service, and with whom we have appropriate measures in place to safeguard your rights:
Service providers who provide system administration and information technology services.
Professional advisers including lawyers, auditors and insurers providing banking, legal, insurance and accounting consultancy services.
All processors to whom we transfer your data will respect the security of your personal data and process it in accordance with the GDPR.
We only allow such processors to process your data for specified purposes and in accordance with our instructions. However, in order to comply with transparency requirements, you may request a list of the companies that provide services to us by sending an email to: firstname.lastname@example.org.
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised manner, modified or disclosed. In addition, we restrict access to your personal data to those employees, agents, contractors and other third parties who have a business need to know that data. They will only process your personal data in accordance with our instructions and are bound by a duty of confidentiality.
We have implemented procedures to deal with any suspected breach of your personal data and will notify you and the Supervisory Authority in the event of a breach of security as regulated in Articles 33 and 34 of the GDPR.